Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/47274137-8620-37cf-85ae-8c52651ab03b.roa
File:                     47274137-8620-37cf-85ae-8c52651ab03b.roa (raw, json)
Hash identifier:          7sfpabevoeJYqVl9A3AEd27lKtqNscPd+OAaLyiG3zo=
Subject key identifier:   25:11:BC:9A:D9:9C:13:B3:86:0B:28:75:11:C5:48:F1:09:4C:43:BD
Certificate issuer:       /CN=ff628b89-9857-41f9-ad26-71ea8c802cb9
Certificate serial:       010D0C9F4328584E82AC105462326A4D75B0E080
Authority key identifier: 12:46:29:CC:92:DC:F6:9A:7B:62:C1:F1:EC:9B:E9:FD:26:ED:4E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/47274137-8620-37cf-85ae-8c52651ab03b.roa
Signing time:             Wed 15 Jul 2026 20:10:17 +0000
ROA not before:           Wed 15 Jul 2026 20:10:17 +0000
ROA not after:            Tue 13 Oct 2026 20:10:17 +0000
asID:                     62973
IP address blocks:        23.183.72.0/24 maxlen: 24
                          192.5.255.0/24 maxlen: 24
                          2602:819:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/ff628b89-9857-41f9-ad26-71ea8c802cb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/ff628b89-9857-41f9-ad26-71ea8c802cb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:ac:10:54:62:32:6a:4d:75:b0:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff628b89-9857-41f9-ad26-71ea8c802cb9
        Validity
            Not Before: Jul 15 20:10:17 2026 GMT
            Not After : Oct 13 20:10:17 2026 GMT
        Subject: CN=1b5ca0bc-9727-42c6-9f76-46b91144f632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:fa:f6:cd:21:45:ec:d0:63:e2:83:e4:ee:
                    17:b7:06:14:61:3e:27:08:c2:75:b5:ce:87:c2:5d:
                    da:f6:84:60:8b:b1:23:be:40:23:10:1e:9a:3d:f9:
                    ea:1a:42:13:b5:70:8b:7c:0f:8f:f6:a8:ff:9e:94:
                    54:94:89:4c:1d:ec:d2:43:a1:e3:ae:16:77:eb:43:
                    21:64:ef:5a:74:13:9c:2c:5c:70:cc:4b:aa:9a:ab:
                    0f:c3:ac:81:a6:82:55:ac:84:b9:71:6d:92:bb:a0:
                    7a:c0:a4:7d:06:fc:bc:e5:30:da:cd:96:92:c5:31:
                    35:1f:91:64:50:16:2b:ec:7b:45:7d:1f:df:a2:43:
                    11:3b:d0:35:83:80:9c:7d:5f:20:6c:da:d8:4f:c1:
                    55:d0:bf:73:94:fc:a3:30:88:c8:69:2a:d7:c3:e1:
                    0a:e7:f6:06:96:62:66:cb:c6:64:69:a3:76:a7:5d:
                    5b:03:45:e0:3e:c6:a3:91:b4:16:fa:bf:70:a0:33:
                    5e:c3:55:bb:3d:08:25:85:1c:0a:ab:46:87:b5:2b:
                    b7:84:5b:2a:ce:a4:79:52:f5:0f:8a:54:99:27:52:
                    63:7e:00:b4:37:03:6e:46:59:59:03:c8:5a:76:c1:
                    d2:e0:1d:81:54:6b:d2:c4:d6:ab:cd:13:b9:87:dd:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:BC:9A:D9:9C:13:B3:86:0B:28:75:11:C5:48:F1:09:4C:43:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/47274137-8620-37cf-85ae-8c52651ab03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9/ff628b89-9857-41f9-ad26-71ea8c802cb9.crl

            X509v3 Authority Key Identifier:
                keyid:12:46:29:CC:92:DC:F6:9A:7B:62:C1:F1:EC:9B:E9:FD:26:ED:4E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ff628b89-9857-41f9-ad26-71ea8c802cb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.72.0/24
                  192.5.255.0/24
                IPv6:
                  2602:819:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:13:81:ad:fa:46:95:d0:74:e3:51:af:e5:f2:77:75:ff:
         30:ba:b0:d8:ab:7e:e9:8b:3c:f3:f3:05:c3:d9:6e:04:17:2e:
         e3:a6:3a:aa:13:10:01:86:c3:af:42:f7:48:d8:20:e6:7e:3e:
         d4:7b:27:a0:8b:4e:ff:04:3a:90:24:d2:dd:08:2a:94:6f:78:
         a7:c3:77:a6:02:8d:da:15:e9:25:80:ed:be:84:a0:f9:f1:e1:
         1b:52:28:16:94:49:8d:a9:35:97:0f:a8:42:28:03:96:81:c9:
         88:a3:d6:71:7d:62:fe:15:a7:c3:a2:e4:f3:20:50:b8:f1:15:
         e7:e8:82:e0:df:82:36:10:ab:d9:f8:14:30:1a:9f:3f:e5:84:
         2b:f4:76:c8:64:44:e5:e4:82:0f:07:10:1e:22:b5:53:d8:1d:
         26:6a:63:fc:8a:41:ad:ee:2d:4e:d5:a3:20:47:5a:7e:7f:16:
         06:2f:8e:6f:70:28:f8:ab:e0:0c:ed:65:73:ed:fc:2e:ba:f9:
         01:6e:29:f5:25:67:b2:37:1d:95:09:02:c1:82:e7:08:6a:fc:
         bb:21:2e:f8:27:c5:f4:e4:ec:16:c0:f1:2c:b6:fd:04:81:ed:
         29:7f:87:cb:28:80:51:4e:c4:b9:21:f4:b2:1a:0f:d9:03:e0:
         ad:ca:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:18 2026 by rpki-client